EUVD-2022-42844

Malicious code in bioql PyPI...

CVE-2024-34221

The Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions (CWE-276), which can lead to privilege escalation . Specifically, a flaw in the /hrm/controller/ccity.php?positionedit= URL and the position.php parameter allows a user with normal account privileges to ...

CVE-2024-34222

The Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the searccountry parameter located at the URL path /hrm/country.php . An attacker can exploit this vulnerability to execute arbitrary SQL commands, potentially compromising the database. Proof of Concept (P...

CVE-2022-3497

A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been classified as problematic. Affected is an unknown function of the component Master List. The manipulation of the argument city/state/country/position leads to cross site scripting. It is possible to laun...

CVE-2022-3473 SourceCodester Human Resource Management System getstatecity.php sql injection

A vulnerability classified as critical has been found in SourceCodester Human Resource Management System. This affects an unknown part of the file getstatecity.php. The manipulation of the argument ci leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...